$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e39811-9d98-4b6e-af73-f0529b50a66b.roa File: f1e39811-9d98-4b6e-af73-f0529b50a66b.roa (raw, json) Hash identifier: /yFc9vwc8Tnv+XnC1uprRuEMQr22R3exFlDFVRyhj3c= Subject key identifier: 61:F2:49:19:0F:08:C1:F7:29:73:E4:DC:96:C8:3D:64:0D:55:C4:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67E344054CF5881B731677654911939E31CA53A6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e39811-9d98-4b6e-af73-f0529b50a66b.roa Signing time: Wed 06 Aug 2025 01:06:59 +0000 ROA not before: Wed 06 Aug 2025 01:06:59 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.186.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e3:44:05:4c:f5:88:1b:73:16:77:65:49:11:93:9e:31:ca:53:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 01:06:59 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=5e4ad17571f9f89309271be2d5b228ad814efd527e3dd0a8cb9db5cc7aa1bf31, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:8f:6d:a8:ed:22:8a:62:5e:0d:cd:97:61: 6c:d2:63:20:8a:6f:33:59:72:b0:73:d7:25:de:fc: db:03:b0:97:fa:e7:9e:3e:51:55:25:f4:b0:50:7a: 1c:48:c1:3b:cb:d0:32:13:d9:ad:39:a6:a0:f8:d1: 84:f8:6f:9e:1c:20:3e:50:b5:4d:3a:83:2e:a1:e4: 9d:81:be:91:28:c3:95:c5:e9:c1:8e:7d:f2:38:1c: 8c:e6:15:19:a2:6d:10:53:4a:7d:a6:8d:23:c3:ff: 43:03:0b:9c:34:d5:4d:24:d7:5a:63:c6:03:f8:52: 09:96:5e:1d:3c:ad:c2:a6:95:16:5a:5f:3c:9d:d0: 2a:1e:59:50:a3:61:17:9f:4a:da:3c:be:d3:b6:c8: be:c9:75:07:3f:4d:7d:e1:2a:79:5c:8e:17:dd:b7: f2:ed:92:c0:d9:9b:78:58:6b:e3:8f:45:b8:5e:18: 00:c3:98:bb:fb:17:e9:d9:ad:91:bd:89:e8:bc:1a: eb:3d:fe:3d:b8:dd:a5:45:bf:e4:66:0f:fd:bf:86: eb:90:a3:9f:6d:e1:9a:75:f4:98:9c:d8:79:9b:eb: ff:5f:81:e1:f3:3d:eb:3a:39:7a:9e:d7:25:06:ba: 93:9b:3b:b6:1a:87:59:3f:9b:c7:2f:2a:99:de:54: a7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F2:49:19:0F:08:C1:F7:29:73:E4:DC:96:C8:3D:64:0D:55:C4:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e39811-9d98-4b6e-af73-f0529b50a66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.186.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:2b:1c:25:5b:01:76:16:91:ec:fd:51:b7:ee:24:97:3c:30: 94:21:1c:1c:25:9f:2b:a4:04:0f:d4:b9:f3:a1:f6:33:b8:ac: 2f:b2:26:b8:48:c9:35:ba:7f:0f:3a:96:7a:88:83:e3:7e:28: df:d9:79:fa:d3:39:f0:c5:ba:63:a1:48:32:34:d5:81:0b:74: af:53:e6:a5:f4:fd:b5:b8:58:b4:71:3b:14:26:52:85:a9:85: 4f:0a:ba:0f:6b:67:ec:3c:96:18:07:60:33:98:5e:2c:7a:6f: 8c:ec:9c:ed:4f:bf:29:42:49:43:15:84:fc:e2:bc:1d:43:45: 75:a3:ef:3d:7f:ee:2c:a9:5a:69:3c:60:45:a8:69:a9:a4:b5: bb:79:4a:b2:42:8a:88:8e:f1:25:9a:c4:97:47:20:b2:21:89: 82:d8:80:27:ac:c2:92:77:f8:1a:86:1e:80:c6:1a:a7:d6:24: d2:93:71:f5:c6:f3:c3:e7:48:7b:7a:5a:8c:ae:e7:7c:f4:60: 0b:10:9a:79:f2:68:c7:a8:e0:74:a5:09:e6:1b:fc:a0:6d:ae: ba:d6:02:68:ae:d1:58:9f:84:66:a2:07:56:72:1c:c9:4c:a9: 9e:e5:75:7c:6a:c0:d2:e9:33:d5:b9:73:f2:9d:22:ac:3f:99: f5:69:53:99 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZ+NEBUz1iBtzFndlSRGTnjHKU6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDEwNjU5WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTRhZDE3NTcxZjlmODkzMDkyNzFiZTJkNWIyMjhhZDgx NGVmZDUyN2UzZGQwYThjYjlkYjVjYzdhYTFiZjMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8HY9tqO0iimJeDc2XYWzSYyCKbzNZcrBz1yXe/NsDsJf6 554+UVUl9LBQehxIwTvL0DIT2a05pqD40YT4b54cID5QtU06gy6h5J2BvpEow5XF 6cGOffI4HIzmFRmibRBTSn2mjSPD/0MDC5w01U0k11pjxgP4UgmWXh08rcKmlRZa Xzyd0CoeWVCjYRefSto8vtO2yL7JdQc/TX3hKnlcjhfdt/LtksDZm3hYa+OPRbhe GADDmLv7F+nZrZG9iei8Gus9/j243aVFv+RmD/2/huuQo59t4Zp19Jic2Hmb6/9f geHzPes6OXqe1yUGupObO7Yah1k/m8cvKpneVKdnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYfJJGQ8Iwfcpc+Tclsg9ZA1VxIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxZTM5ODExLTlkOTgtNGI2ZS1hZjczLWYwNTI5YjUwYTY2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQujANBgkqhkiG9w0BAQsFAAOCAQEAKiscJVsBdhaR7P1Rt+4klzwwlCEc HCWfK6QED9S586H2M7isL7ImuEjJNbp/DzqWeoiD434o39l5+tM58MW6Y6FIMjTV gQt0r1PmpfT9tbhYtHE7FCZShamFTwq6D2tn7DyWGAdgM5heLHpvjOyc7U+/KUJJ QxWE/OK8HUNFdaPvPX/uLKlaaTxgRahpqaS1u3lKskKKiI7xJZrEl0cgsiGJgtiA J6zCknf4GoYegMYap9Yk0pNx9cbzw+dIe3pajK7nfPRgCxCaefJox6jgdKUJ5hv8 oG2uutYCaK7RWJ+EZqIHVnIcyUypnuV1fGrA0ukz1blz8p0irD+Z9WlTmQ== -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:51 2025 by rpki-client